Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8f2aa9b2-ff2e-40c3-a1ad-c0b3d10b1fac.roa
File: 8f2aa9b2-ff2e-40c3-a1ad-c0b3d10b1fac.roa (raw, json)
Hash identifier: G0nHEfguKLYksuCLdt3REgH/6dBxLCNo3hx/OZO6Jgo=
Subject key identifier: 15:8B:39:3B:B6:C0:F9:2D:EC:85:1F:42:61:AD:21:50:36:78:41:B3
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 725FDFF584FB52CDB49866D9DD2C80B8EC0E039E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8f2aa9b2-ff2e-40c3-a1ad-c0b3d10b1fac.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:5000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:5f:df:f5:84:fb:52:cd:b4:98:66:d9:dd:2c:80:b8:ec:0e:03:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0e:37:d6:49:70:c9:65:db:49:81:6b:ae:ee:
15:71:9e:69:2b:13:18:6a:55:c6:0b:45:32:5e:d2:
00:40:02:28:8c:df:60:05:b6:84:f0:7f:64:36:74:
15:92:0c:73:4b:a7:21:d1:62:3f:e1:47:d3:df:3b:
40:08:c2:40:ab:f1:7d:8e:98:94:82:47:4f:06:d9:
36:f1:fc:aa:d5:d5:94:cc:cc:f8:ba:1f:86:b4:f4:
1e:1e:d7:af:dc:f1:66:3a:bf:a6:f8:fb:bf:a0:70:
42:b2:81:87:69:3c:48:7f:eb:50:6c:eb:de:31:0c:
e6:12:91:52:8a:0b:31:48:cd:db:15:51:f0:c1:0a:
91:28:3a:70:37:4d:a7:b6:95:0b:39:15:0e:7e:ff:
85:a7:e6:83:cc:01:e6:8f:6e:aa:a5:cd:4c:34:3d:
3a:d8:f8:95:e1:f8:34:7c:16:3e:81:49:b5:56:bc:
1c:fc:93:c6:dc:53:da:1b:6e:c4:76:3b:6a:0c:5d:
77:16:0b:ac:47:eb:91:bb:28:76:52:c6:15:19:19:
33:54:e9:06:ac:bc:a4:f3:52:47:10:aa:5e:d7:18:
b1:af:1f:20:de:63:0e:78:4a:93:d2:e8:4f:f1:37:
81:d3:28:19:6f:c8:13:bb:99:3e:13:e9:cf:1a:0c:
03:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:8B:39:3B:B6:C0:F9:2D:EC:85:1F:42:61:AD:21:50:36:78:41:B3
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8f2aa9b2-ff2e-40c3-a1ad-c0b3d10b1fac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:5000::/40
Signature Algorithm: sha256WithRSAEncryption
06:3b:89:33:d7:4a:cf:41:5b:7e:82:32:ff:5f:b4:f5:1f:5c:
11:14:68:75:dd:71:f9:74:d3:ba:5e:3b:64:15:1c:17:8b:a2:
ee:61:29:11:af:a7:07:17:63:ef:2d:65:14:a3:7e:6f:8a:6b:
ba:05:81:3b:3b:f5:79:d2:6c:88:4c:73:a4:89:4a:63:65:c4:
6b:5e:4f:46:b8:e5:31:02:83:61:48:74:9e:7b:5a:37:91:0f:
3b:ef:63:45:aa:4f:4d:6b:e9:d8:9c:8c:8d:12:29:4e:5b:33:
26:fd:5a:50:73:39:96:1a:ca:a0:e5:08:d5:73:9d:ae:35:2a:
79:8a:9c:02:cd:41:93:49:aa:fd:c8:a7:13:3c:7a:be:cd:bd:
54:b5:6b:32:05:fb:09:0d:12:50:62:35:ab:be:49:37:17:4b:
92:c6:8f:09:ce:96:fb:5a:eb:55:94:dc:4d:bb:13:e6:e1:3a:
80:ef:45:45:64:e3:e6:59:3f:ab:00:71:80:4f:70:e4:a9:a4:
2d:bb:33:47:12:39:a4:d3:a2:46:9a:49:cd:fa:18:5d:5b:7e:
6d:19:f3:c8:00:22:f4:bd:61:3f:6a:0f:34:d4:46:bd:bd:80:
f8:b6:eb:fd:73:23:51:84:46:bd:90:88:b6:74:94:5f:dd:31:
a2:de:b0:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:20:17 2025 by rpki-client